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Abstract — We study the problem of transmission of binary 
input non-linear functions over a network of mobiles based on 
CDMA. Motivation for this study comes from the application 
of using cheap measurement devices installed on personal cell- 
phones to monitor environmental parameters such as air pol- 
lution, temperature and noise level. Our model resembles the 
MAC model of Nazer and Gastpar except that the encoders are 
restricted to be CDMA encoders. Unlike the work of Nazer and 
Gastpar whose main attention is transmission of linear functions, 
we deal with non-linear functions with binary inputs. A main 
contribution of this paper is a lower bound on the computational 
capacity for this problem. While in the traditional CDMA 
system the signature matrix of the CDMA system preferably 
has independent rows, in our setup the signature matrix of the 
CDMA system is viewed as the parity check matrix of a linear 
code, reflecting our treatment of the interference. 

I. Introduction 

The problem of decoding functions of sources rather than 
the sources themselves in a Multiple Access Channel (MAC) 
has been studied in several works (see for instance |2| and 
its follow up works, also |3| and |4|). It has been shown that 
separation is not always optimal in such scenarios, even when 
the sources are independent |2 |. The intuitive reason for this is 
that the interference caused by other users could be exploited 
to compute a given function over the air, if the pattern of the 
interference matches the functions we want to compute. 

All of the previous models for transmission of functions 
over MAC (that we have seen) do not impose any restrictions 
on the structure of the encoders, except perhaps on the input 
power. However some promising emerging applications may 
violate this assumption. We were motivated by one such 
application to impose a CDMA system as being part of the 
encoders. 

The application is monitoring the exposure of humans to 
environmental parameters such as air pollution, temperature, 
etc. since the authors are living in one of the world's most 
polluted cities. The traditional way of monitoring is to install 
measurement devices distributed over a given area. Suggestion 
has been made to install low cost measurement devices on 
personal cell-phones, e.g. see Although the focus of this 
paper is not the application, but we would like to mention a 
motivation for this application since it may be new (we have 
not seen it in the literature). Suppose we are interested in 
the collective exposure of residents to air pollution (not just 
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Fig. 1. The communication model. The observations Oi, ■ ■ ■ , Oj^ are passed 
tlirough encoders (resulting in T^'s), multiplied by signatures (the s^'s) of a 
CDMA systems and transmitted over the air (a Gaussian MAC channel). The 
receiver gets sum of the transmitted signals plus noise (i.e. Y), and wants to 
recover a function /(Oi, ■ ■ ■ , Ol) of the observations (denoted by U). In 
the general model we also allow for b distinct functions instead of just one. 

personal exposures or the general pollution maps). To find the 
answer, it is not sufficient to have a pollution map, but also the 
population density at the polluted areas at various times in a 
day. Let us take the average of the measurements by the mobile 
sensors that are being carried by the residents as they move 
in the city. There will be just more cell-phones in populated 
areas and we can simultaneously take into consideration both 
the pollution and the population density. 

Note that when the mobile system in the application is 
employing the CDMA system, it is preferable to use the same 
architecture to transmit functions of measurements by the cell- 
phones. Thus, we are considering the problem of function 
transmission over a network of mobiles based on CDMA. 

We argue that finding the optimal scheme for transmission 
of functions can be studied from two different criteria: i.e. 
maximizing privacy and minimizing transmission rates. Trans- 
mission of the whole data (rather than a function of it) may 
not only be bad in terms of transmission rates, but also it 
may compromise the privacy of cell-phone users. Therefore 
we can either maximize privacy or minimize transmission rates 
over all codes that allow reliable function computation. For the 
Komer-Marton problem 1 3 1 the two criteria yield exactly the 
same answeiQ but we believe in general they may be different. 

' This is because the equivocation rate for each user is bounded from above 
by the entropy of their source conditioned on the function to be computed, 
which is exactly what the Korner-Marton scheme achieves. 



Nonetheless in this study we follow the traditional approach 
of minimizing the transmission rates. 

Our model is shown in Fig. [T] which is similar to the 
one considered in ||2l, except for addition of the signature 
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matrices. It is discussed rigorously in section III But before 
that in section |llj we intuitively discuss our interpretation 
of the signature matrix of the CDMA system as the parity 
check matrix of a linear code, demonstrating our treatment 
of interference. Section |V-A| discusses the lower bound of t2J 
applied to transmission of non-linear functions in our setting. 
Section |V] contains our main result, providing a lower bound 
on the computational capacity for our problem. The bound 
is expressed in terms of the answer to another problem that 
we introduce, i.e. the problem of Slepian Wolf with the same 



compression matrices (discussed in section IV i. We believe the 
latter problem can itself be of independent interest. We will not 
be discussing any upper bounds, but one can derive an upper 
bound using the ideas in [2| by merging all the transmitters 
into one node (the same technique used in some versions of 
the cut-set bound). 

II. Signature Matrix as a Parity Check Matrix 

In this section we discuss our use of the signature matrix 
as a parity check matrix at a very simplistic level to convey 
the basic intuitions. Let us assume that we have only three 
cell-phones. These cell-phones are observing binary random 
variable Oi, O2 and O3 respectively. The goal of the base 
station is to recover a boolean function of Oi, O2 and O3. 
Let us assume that the cell-phones directly insert their uncoded 
bits into a CDMA system with a given signature matrix. For 
instance, if the signature matrix is 



1 1 
1 1 



(1) 



the signature of the first, second and the third cell-phones 
would be the vectors Si = (1, 1)', S2 = (1, 0)* and S3 = (0, 1)* 
respectively. Assuming tight power control, the receiver gets 
the vector OiSi + O2S2 + O3S3 plus some noise. Let us assume 
that there is no noise for now. In this case, the receiver gets two 
symbols, the first of which is Yi = O1+O2 and the second one 
is Y2 — O1 + O3. Note that the summation here is real addition 
in K, and not in the field F2. Because Oi takes values in {0, 1}, 
Yi and I2 will be numbers in the set {0,1,2}. If Yi = 0, we 
can conclude that Oi — O2 = 0. The value of O2 would then 
specify O3. Similarly, when (Fi,l2) = (2,1) we can figure 
out Oi, O2 and O3 exactly. However, when (Yi, Y2) — (1, 1), 
there are two possibilities: (Oi, 02,03) can be (1,0,0) or 
(0, 1, 1). If one were to compute a function /(Oi, O2, O3) at 
the receiver, the necessary and sufficient condition for doing 
so would be that /(I, 0, 0) = /(0, 1, 1). Note that this impHes 
that among 2^ plausible boolean functions, half of them are 
computable with the given signature matrix. Now, observe that 
if we interpret the signature matrix given in equation ([TJ as 
a parity check matrix, the codewords would be the triples 
(0, 0, 0) and (1, 1, 1). This implies that the triples (1, 0, 0) and 
(0, 1, 1) form a coset for this codebook, because their mod-2 
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sum is a codeword. The constraint /(1, 0, 0) = /(0, 1, 1) says 
that / has to be constant over this coset. 

The above simple example can be extended to more general 
setups. It turns out that if we interpret the signature matrix as 
a parity check matrix, and take a function / that is equal to a 
constant over any coset of the parity check matri)(|^ we will 
be able to perfectly recover / when the channel is noiseless. 
When the channel is noisy, one can overcome noise via pre- 
coding; this is explained formally in Sec. [V] 

III. The Communication Model 

In this section we define the communication model for our 
problem. Some of the notation we encounter as we go along 
the paper are summarized in Table |l] For a r.v. T we use T" 
as a shorthand for the sequence (T[l], T[2], . . . , T[n]). 

Assume that there are L cell-phones. Let us denote the 
observation of the i-th cell-phone by rv. Oi taking values 
in the discrete set Oi. R.Vs Oi, O2, . . . , Ol are jointly dis- 
tributed according to a given poi,02,...,Ot (oi, 02, ■ ■ - ol)- We 
assume that the L cell-phones are observing i.i.d. copies 
Ol, O2, . . . , O^. The goal of the cell-phones is to enable 
the base station to recover i.i.d. copies of b functions of 
the observations which we denote hy Ui {1 < i < b), 

= /z(0i,02,...,0l). 

Definition of a code: (see Fig. [T]) A code consists of 

1) An encoder for each cell-phone, mapping Of (k i.i.d. 
copies of Oi) into a sequence of n bits (denoted by 

2) A binary signature of length N for the i-th cell-phone, 

3) One decoder at the receiver 

The actual signals transmitted over the air are Xf^ for i £ 
[1 : L], that are formed by multiplying each bit of encoder's 
output T" into the signature s^. Note that the length of T" is 
n, and the length of is N. Since each bit of is multiplied 
by the whole sequence Si in the CDMA system, the output will 
be a binary string of length nN, denoted by Xf^. 

Assuming a CDMA power control, the transmitted Xf^ 
goes through a Gaussian MAC channel, and the receiver gets 
y"^ where Y[i] = E^^i^jW + G [1 : nN] for a 

Gaussian noise sequence Z"^. The receiver (base station) 
takes the output sequences Y^^ and passes it through a 
decoder to reconstruct the b functions (i G [1 : b]). The 
probability of error of the code is taken to be the probability 
that Uj' ^ for some i £ [1 : b]. The rate of the code is 
taken to be i? = To impose a power constraint on the 



^Of course the constant may depend on the coset. 



users, we assume that that Tj[i] is taking values in {0, 
and the variance of Z[i] is a^. 

Computational Capacity: Given a signature length N, A 
communication rate is said to be achievable if there is a se- 
quence of codes, Cn for n e N, all having signatures of length 
N, such that lim„^oo Pe{Cn) = and lim„^oo R{Cn) = Rn 
where Pe(C„) and R{Cn) are the probability of error and rate 
of the code respectively. The computational capacity for a 
signature length N, Cn, is taken to be the supremum of the 
set of achievable rates for that signature length N . 

IV. Slepian-Wolf With The Same Compression 
Matrices 

Before discussing our main result, we need to introduce the 
problem of Slepian-Wolf with the same compression matrices. 
We believe this problem can itself be of independent interest. 

We first begin with the problem in a special case. Suppose 
we have three correlated binary sources Vi, V2 and V3 jointly 
distributed according to p{vi,V2,vs). I.i.d. copies of these 
three sources are observed by three parties, who want to 
communicate these i.i.d. copies to a fourth party, Alice, using 
noiseless links of rates R2, and R3. We are interested in 
the case of Ri = R2 — R3 = R. The minimum possible value 
of R will be the minimum value of R such that (i?, R, R) is 
in the Slepian-Wolf region. We call this Rsw- We know that 
for any R > Rsw we can achieve the rate triple {R,R,R) 
using linear codes: there are matrices Bi, B2 and B3 (of size 
nR X n) where the three parties can use and send BiV^, 
B2V2 and -B3V3" where is a column vector consisting of 
Vi[j] for j e [1 : n]. The multiplication is in the field F2. 

Now, what if we are interested to find a single matrix B, 
such that having BV{\ BV^ and -BV3" we can recover (V{^, 
Kf and VJj")? The three parties are sending at rates i?i = 
R2 — R2 — R lo Alice using the same compression matrix 
B. We denote the minimum value of R in this case by Rg§(r- 
Clearly Rg§ir is larger than or equal to Rsw (defined in the 
previous paragraph), because more restrictions are imposed on 
the definition of Rg^- But is Rg^ always equal to Rgw"^ We 
show in Claim [2] that this is not true. The definition of Rg^r 
can be extended to more than three parties in the natural way. 

Use of the same matrix B to compress correlated data 
(or Slepian-Wolf with the same compression matrices) arises 
naturally in our problem. It is also related to the "syndrome 
technique" whereby a single code based is constructed for 
distributed compression (see for instance |5||6||7|). And after 
all, it is interesting to find the best compression rate one can 
achieve if a universal compression code is used by all nodes 
in a distributed source coding problem. 

We do not know the exact value of Rg^, but prove a few 
results about it. 

^^There will be a power gain by subtracting the mean of Tj [i] from it, 
because that would reduce the variance of the transmitted signal. This would 
convert Tj [i] into a it bipolar signal. However, use of 0/ 1 signals makes the 
exposition of the paper more appealing. Furthermore random variables Tj [i] 
that we will end up using will have a uniform distribution over {0, 1} and can 
be adjusted to bipolar signals at the very last stage to decrease the average 
power consumption, while leaving the arguments unchanged. 



Claim 1: Let us assume we have only two binary r.v.'s 
Vi and V2. Let K ^ Vi + V2 (mod 2). Then R'g^ for 
transmission of these two r.v's is less than or equal to 
uiax{H{K),H{Vi\K)). 

Proof: Let R = msix{H{K), H{Vi\K)). Here is the 
sketch of the proof: let us generate the coordinates of the 
common compression matrix B (of size nR x n) uniformly 
and randomly from {0, 1}. Then having BV{'' and BV2, we 
can add them modulo two to get B{V{^ + V2) — BK"^. Since 
R > H{K), _B is a good source code for recovering 
with high probability. Hence we can decode iC" first. The 
Slepian-Wolf rate for recovering with serving as a 
side information is H{Vi\K). Since R > H{Vi\K), B is a 
good SW code with high probability. Therefore we can find 
V7*. Having and K^^, we can also recover Vj"- ■ 

Claim 2: There exists Vi , • • • ,Vr such that the value of 
Rg^ is strictly larger than Rgw- Next, for any p(f 1, • • • , Vr), 
Rg^ is less than or equal to mm{rRgw,i^BXi H{Vi)). 

Proof: Let Vi = V2 = • • • = V;. Then Rgw, i.e. the 
minimum value of R such that {R, R, R) is in the Slepian- 
Wolf region, is equal to . However, Rg^ is equal to 

To show that Rg^ < rRgw always holds, we start from 
an arbitrary code for Rgw, and construct another code for 
Rgw- Take an arbitrary code with compression matrices 
Bi, B2, Br all of size nR x n. Let B to be equal to 
[Bl B\ ■ BlY where t is the transpose operation. One can 
verify that matrix B is a valid common compression matrix, 
and is achieving the rate rR for the problem of Rgw- Thus 
^sw — '''Rsw- Note this upper bound on the ratio 



cannot be made smaller than r because of the example given 
at the beginning of this proof. 

To show the inequality Rgw 1^ max^ observe that 

a random compression matrix of size n[maxi(i7(Vi) + e] x 7i 
allows for recovery of from i?V^" (for all i e [1 : r]) with 
the average probability of error converging to zero. Thus a 
particular instance should also work. ■ 

V. Main results 
In this section we state our main results. Proof is given in 

Section lyn] 

Let fi{Oi, . . . ,0l) (1 < i < 6) be a set of functions 
satisfying the property that 

/,(oi,02, . . . ,ol) = /j(oi,02, . . -,o'l), ie[l : b], 

for any two sequences (oi, 02, . . . , ol) and (o'j^, 02, . . . , oV) 
belonging to the same coset of some parity check matrix H£j 
Without loss of generality we can assume that H has distinct 
rows hi, h2, hr- Thus matrix H is of size r x L. 

Theorem 1: For any signature length N > r, the following 
rate is achievable 

c c 

^""^wTm- 7v.max,ij(e™:^/ h^ijPjY 

■* Vectors (01, 02, ■ ■ ■ , o^) and (o'j, Oj, . . . , o^) belong to the same coset 
if H[oi, 02, ... , oj;,]* = H[o'j^, Oj, . . . , o'j^Y where the product is in F2. 



where 9\ is Rg^ for the choice of Vi — J2j=i L 
(modulo 2). The second lower bound comes from applying 
Claim [2] and is an explicit lower bound expression. 

The number c is the capacity of a channel with input 
alphabet W = {0,1} and output alphabet [— ^,|] defined 
as follows: the output is formed by adding W to a Gaussian 



Wi 



noise with variance 



LfJ 



, and then taking it modulo 2, meaning 



that we add an integer multiple of 2 to it to make it fall into 
the interval [— | , | ) . Note that because of the symmetry the 
capacity occurs at a uniform input distribution. 

A. Comparison with the computational capacity of ^ 

In this section we discuss how our lower bound extends 
the result of Nazer and Gastpar in We find the set of 
functions where we can use the result of Nazer and Gastpar, 
and the lower bound it gives us. 

Our formulation above is similar to the one given by Nazer 
and Gastpar [2J, except that we have a signature matrix here. 
Nonetheless, if we fix the signature matrices, we can think 
of a virtual channel between the encoder and decoders that 
includes the signature matrix. The input to this virtual channel 
is (Ti, Ta, Tl) and the output is Y{1 : N) = J2f=i ^Ml : 
N)+Z{1 : N) where the noise vector Z{1 : N) has covariance 
matrix <t^I. If we use the virtual channel n times, we get an 
output vector of size nN that we were denoting by y"^. 

In this case we can write down the lower bound given in |[2l 
when we have a linear function over a field. We are mainly 
concerned with functions with binary inputs. The only linear 
function on the field F2 is the XOR function. So this already 
puts limitations on the lower bounds we can get by |2|. When 
Ui (for 1 < i < 6) is the XOR of a subset of the observations 
Oi, Ol, we get the following lower bound 

I[®t^T,-Y{l:N)) 
NH{Ui,U2,...Ub) ' 

where the factor N in the denominator comes from our 
definition of rate. Because we are free to choose the signatures 
Si, Sl we can take maximum of the above expression over 
all Si, Sl- 

I{®t,T,;Y{l:N)) 
NH{Ui,U2,...Ut) ■ 

The above result works only when the UiS are the XOR func- 
tions of subsets of Oi, ...,Ol, and it involves a maximization 
problem that we found hard to do, even when we have linear 
functions on a field. 

To compute arbitrary nonlinear boolean functions of the 
observations, Nazer and Gastpar suggest that we increase 
the field size and embed the non-linear function in a linear 
function defined on a larger space (see Theorem 2 of |[2|). 
Although this would not solve the maximization problem over 
the signatures Si, Sl mentioned above, it will result in a 
lower bound for non-linear functions. In this paper we take 
an alternative approach of using several linear functions in 
the same field using a particular construction (rather than one 
single linear function over a larger field). In order to transmit 
several functions over a charmel, ||2| uses a successive Slepian- 
Wolf type scheme. Our model allows us to do better than this. 
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Fig. 2. A model used for simulations. The observations Oi , ■ ■ ■ , O3 are 
assumed to be the result of a binary source S passed through three independent 
BSC channels. 
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Fig. 3. The lower bound on the computational capacity for Oi, O2 and 
O3 of Fig. 12] The plot is in terms of p{W2 = 1) and p{W'i, = 1) when 
p{Wi = 1) = 0. 

Through an appropriate choice of the signature matrix, we can 
run part of the transmission of the functions in parallel, getting 
an extra gain compared to the scheme considered by 

VI. Simulation 
Consider the boolean function 



/(Oi,02,03) = Oi0203 + Oi0203 mod 2. 

This is not a linear function in the field F2. Let us assume that 
N = 2. We can use the signature matrix given in equation 
[T] since / is constant over all of its cosets. We have Vi = 
Oi + 02(mod 2) and ^2 = Oi + 03(mod 2). Therefore 



H{Vi) 
H{V2) 



h{p{Oi 
h{p{Oi 



02) ), 

03) ), 



and 



where h{-) is the binary entropy function. The main theorem 
implies the following lower bound. 

R = 



2 • max(/i(p(Oi = O2)), /i(p(Oi = O3))) ' 

The value of c < 1 depends on cr. For the sake of illustration 
we assume that cr is such that c = 0.5. 
Note that R = 00 when 



p{Oi 
piOi 



02) e{0,l}, 

03) e{0,l}. 



and 



This is expected since in each of the four cases /(Oi, O2, 03) 
is a constant. It would be interesting to understand the behavior 



of the lower bound when p{Oi = O2) and p{Oi = O3) are 
not exactly {0, 1}, but rather in its vicinity. To study this, let 
us consider the model depicted in Fig. [2] in which Oi, O2 
and O3 are assumed to be the result of a random variable B 
passing through three independent BSC channels, i.e. 

Oi = S + Wi,02 ^ S + W2,03 = S + W3 mod 2, 

where Wi's are binary random variables. p{Wi = 1) is the 
crossover probability of the i*'* channel. When p{Wi = 1) G 
{0, 1}, the lower bound is 00. Fig. [s] plots the lower bound R 
in terms of p{W2 ~ 1) and p{W3 — 1) when p{Wi = 1) = 0. 

VII. Proofs 

Proof of Theorem [T]- We create the signature matrix of 
the CDMA by repeating the matrix H to get a matrix of size 
N X L. This means that each of the rows hi, /12, hr 
would be repeated [—J times; extra zeros are padded if — 
is not an integer. At the receiver, we can look at the received 
y's corresponding to each of the [^J repetitions and take 
their average. This would reduce the variance of noise for 
that transmission to cr'^ = j^j- So, this would be as if the 
signature matrix is of size r (instead of N) identical to H, 
and the noise variance is a'^ (instead of cr^). We are going 
to continue assuming that the signature matrix and the parity 
check matrix are both H. 

At time i, the cell-phones are sending Ti[i],r2[i], ...,TL[i] 
respectively. The receiver gets iJ [Ti[i], T2[i], Ti[«]] plus 
noise where the matrix multiplication here is in K. To convert 
the matrix multiplication from M to that in F2, the receiver 
computes the modulo 2 of each received number (as discussed 
in the statement of the theorem), mapping it to the interval 
[-i, f ). This would be as if H[Ti\i],T2\i], ...,TL[i\Y (matrix 
multiplication in F2) is transmitted but the noise added to this 
is no longer Gaussian; it is a Gaussian noise mod 2. Number c 
in the statement of the theorem is the capacity of this channel. 

Having described the signature matrix, and the decoder's 
mod 2 postprocessing of the signal, we now turn our attention 
to the encoders and the decoder We can divide the rest of 
the proof into two parts. The first part is a general statement 
about recovery of the desired functions of the observations 
from Vi's. This is used in the second part of the proof to 
design the encoders and the decoder. 

(I) We first claim that given any values for {01,02, ■■■ ,ol), 
knowing the values of J2j=i-L ^i^^'^i modulo two for i E 
[1 : r] is sufficient to perfectly recover /^(oi, 02, . . . , o^) 
(1 < i < b). To see this note that having r equations 
J2j=i-L (modulo two) for i S [1 : r] is equivalent to 

having the product iJ[oi, 02, . . . , o^]* in the matrix form; here 
the multiplication is in F2. Note that the number of equations 
is r whereas the number of free variables is L, so it first seems 
that the decoder may not be able to figure out [01,02, ■■■ ,ol]. 
The decoder can list the set of all [o'j^, Oj, . . . , o^] such that 
H[o'i,o'2, ■ ■ ■ ,o']^Y (modulo two) is equal to the received 
H[oi,02, ■ ■ ■ ,0]^Y (modulo two). This would be the coset 
associated to [01,02, ■■■ ,ol] for the parity check matrix H. 
Because fi maps all the sequences in a coset into the same 



number, namely fi{o[,02, . . . , o'^^) are all equal, the receiver 
will be able to exactly recover /^(oi, 02, . . . , o^). 
(II) From the first part of the proof we can conclude 
that if we can reliably communicate i.i.d. copies of Vi — 
12j=i-L (modulo two) to the receiver, it will be 

able to reliably recover i.i.d. copies of /i(Oi, O2, . . . , Ol) 
(1 < i < b). Therefore we have translated the original problem 
into that of communicating linear functions. If we think of 
the signature matrix as part of a virtual channel between 
the encoder and decoders, this virtual channel will be a set 
linear MACs (as defined by f2l) in parallel because of the 
postprocessing at the receiver Therefore our setting is not a 
special case of one considered by Theorem 1 of [2] because 
the channel is not a single linear MAC. Nonetheless we borrow 
ideas from [2J to extend the proof of Theorem 1 of |2|; this is 
not difficult given that the structure of the virtual channel and 
the linear functions to be computed (i.e. V^s) are prepared to 
"match". 

It is possible to find a binary matrix B of size (kDl + e) x k 
for the i.i.d. copies of (Vi, V2, K-) such one can recover 
i.i.d. copies of Fi, V2, . . . Vl, namely ,¥2 , ■ ■ ■ , Vj^, from 
B\yi V2 ■ ■ ■ Vj^]. within a probability of error e, where by 
Vl we mean a column vector consisting of the k i.i.d. copies 
of Vl. The multiplication between the column vector V^ and B 
is done in F2. Next we find a channel coding matrix G of size 
^^l^ti X (fc$H + e) for communicating over a Gaussian channel 
with variance a'^. The i*'' cell-phone computes GBO^. It sets 
this vector of size n = ^=|z7^ to be T". At time j, the random 
variable Ti[f\ is multiplied by signature S;. The receiver gets 
plus a noise vector This is equivalent with getting 

[Ti" T2" • ■ • Tl\H' = GB[Oi O2 ■■■ Ol]H' 
^GB[V^ ■■• Vt], 

plus noise. Since G is a channel coding matrix, we can recover 
B\Vi V2 ■ ■ ■ V^] with high probability. From here we can 
recover Vl^ because of the property of B mentioned above. 
Thus, we have a good code. The rate of this code is 

k k c— e 

Letting e converge to zero, we get the desired result. ■ 
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